NoCheatPlus

Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
-
View User Profile
-
Send Message
Posted Dec 20, 2012@MyPictures
I've tested it at your server and was not able to use the macro. I've also fixed it at my server! The problem was, that at a plugin, there was a line missing, which returns when the event was already canceled.
-
View User Profile
-
Send Message
Posted Dec 20, 2012USE ANTICHEAT IT WORKS WITH 1.4.6
-
View User Profile
-
Send Message
Posted Dec 20, 2012@ MyPictures:
i use: http://dev.bukkit.org/server-mods/nocheatplus/files/41-nocheat-plus-3-8-6-beta-b285/
i can't make a ticket i'm not english, and my english is very bad :/ just try to do it in your serv it's easy to make
-
View User Profile
-
Send Message
Posted Dec 20, 2012@vinzenco
Try reading a little about dev builds before you update to them blindly.
-
View User Profile
-
Send Message
Posted Dec 20, 2012I get a error in 1.4.6-R0.1 (Build #02545)
2012-12-20 19:29:20 [SEVERE] Error occurred while enabling NoCheatPlus v3.8.7-b287 (Is it up to date?) java.lang.ExceptionInInitializerError at fr.neatmonster.nocheatplus.NoCheatPlus.onEnable(NoCheatPlus.java:434) at org.bukkit.plugin.java.JavaPlugin.setEnabled(JavaPlugin.java:217) at org.bukkit.plugin.java.JavaPluginLoader.enablePlugin(JavaPluginLoader.java:457) at org.bukkit.plugin.SimplePluginManager.enablePlugin(SimplePluginManager.java:381) at org.bukkit.craftbukkit.v1_4_6.CraftServer.loadPlugin(CraftServer.java:278) at org.bukkit.craftbukkit.v1_4_6.CraftServer.enablePlugins(CraftServer.java:260) at net.minecraft.server.v1_4_6.MinecraftServer.j(MinecraftServer.java:321) at net.minecraft.server.v1_4_6.MinecraftServer.e(MinecraftServer.java:300) at net.minecraft.server.v1_4_6.MinecraftServer.a(MinecraftServer.java:259) at net.minecraft.server.v1_4_6.DedicatedServer.init(DedicatedServer.java:149) at net.minecraft.server.v1_4_6.MinecraftServer.run(MinecraftServer.java:399) at net.minecraft.server.v1_4_6.ThreadServerApplication.run(SourceFile:849) Caused by: java.lang.RuntimeException: Could not set up access to Minecraft API. at fr.neatmonster.nocheatplus.compat.MCAccessFactory.getMCAccess(MCAccessFactory.java:28) at fr.neatmonster.nocheatplus.NoCheatPlus.initMCAccess(NoCheatPlus.java:105) at fr.neatmonster.nocheatplus.NoCheatPlus.getMCAccess(NoCheatPlus.java:98) at fr.neatmonster.nocheatplus.utilities.BlockProperties.<clinit>(BlockProperties.java:247) ... 12 more
-
View User Profile
-
Send Message
Posted Dec 20, 2012@MyPictures
Whats the IP of the testserver? I have the macro now aswell.
Edit: Well Im now online.
-
View User Profile
-
Send Message
Posted Dec 20, 2012@Blackixx
Feel free to invite him on our test server :). He can test it there if he wants to.
@feez2000
Whats your NC+ and CB version? Make a ticket please so we can keep track of this issue. I will take a look at that, thanks.
@PhanaticD
It was a experimental change to give a bit more compatibility and performance I think but not 100% sure. Its one of those things that only @asofold knows about ;P. You should be do fine without it, we "deactivated" it temporary because it caused some issues with the Combined_BedFly check (NC+ 281 and up, 274 is not affected by this bug).
-
View User Profile
-
Send Message
Posted Dec 20, 2012Hi what does managelisteners do?
-
View User Profile
-
Send Message
Posted Dec 20, 2012@ MyPicture
can't run+jump @ 2 blocks height areas :/
& when someone breaks a block of redstone ore, he's kicked because NCP considers that the redstoneore (light OFF) and the redstoneore (light ON) and two different blocks and think the player breaks the blocks too quickly
-
View User Profile
-
Send Message
Posted Dec 20, 2012@asofold
Im using the latest released build at bukkit. There is no more information about the "hack". Im currently asking the guy who was able to click that fast to send me the macro/tell me how it works.
-
View User Profile
-
Send Message
Posted Dec 20, 2012@Dinastya
Should be nocheatplus.checks.blockplace.speed
-
View User Profile
-
Send Message
Posted Dec 20, 2012What permission do i add to players so they can shoot like 50 snowballs in 1 shot?
I use MagicSpells that got snowball barrage that let them shoot 50 snowballs but nocheat is blocking it.
-
View User Profile
-
Send Message
Posted Dec 20, 2012@optprrime
You might open a thread, the chestshop plugin developer should be the first to be addressed with this question, i would say.
-
View User Profile
-
Send Message
Posted Dec 20, 2012@optprrime
NoCheatPlus is not made to fix "buggy" plugins that allow to be exploited. I would recommend you to make a new thread in the Bukkit Help section on bukkit.org. List all your plugins and permissions there and wait if someone has an idea to that.
@Zilacon
Please make a ticket with your NC+ version and what check exactly gets "spammed".
-
View User Profile
-
Send Message
Posted Dec 19, 2012hello,
i have no cheats plus installed on a bukkit server and was feeling somewhat safe with it. Today a player logged in and exploited my server store for a bunch of server money. I don't see any settings that can protect against this, so i was wondering if anyone knows how i can prevent this from happening? i am having trouble finding any info on google about this exploit, can someone point me in the right direction? i used chestshop to setup the admin store and essentials to manage the money for player accounts.
thanks for any help opt_prime
-
View User Profile
-
Send Message
Posted Dec 19, 2012@asofold
I am running Spigot #285 also known as CB R0.2
And i have compatnocheatplus. And im getting spammed from people playing the game normally.
-
View User Profile
-
Send Message
Posted Dec 19, 2012@Blackixx
NCP version? Please use the one in my signature for the latest RB, do not use the other betas. Any more info (logs) ?
Edit: The arm swinging checks are more to take out the clients that don't update, or say had been, because for them it is pretty easy to adapt. What i would find alarming is if they manage to attack many more times per second than specified in the config (fight.speed, or indirectly for longer periods: combined.improbable).
-
View User Profile
-
Send Message
Posted Dec 19, 2012Im currently working at en epic PvP plugin. Ive tested it at my testserver with NCP and thought everything was safe, BUT a mate with some mods was still able to use a macro which allowed him to attack more than 100 times per second. Ive thought that this would be impossible, because NCP prevents a player from attacking when he is not swinging his hand. And exactly this is the problem: He was swinging his hand everytime. More than 100 times per second. Sometimes NCP has still prevented one hit because it was to fast, but he was able to kill everybody within one second. Please fix this bug. Maybe you could check the total amounts of attacks of a player at a specific time and cancel the event if it is to fast.
-
View User Profile
-
Send Message
Posted Dec 19, 2012@feez2000
Should be fixed already in the new beta version: http://dev.bukkit.org/server-mods/nocheatplus/files/41-nocheat-plus-3-8-6-beta-b285/
-
View User Profile
-
Send Message
Posted Dec 19, 2012Bug with the lastest version, we can't walk/jump on stairs & can't run+jump @ 2 blocks height areas